Privacy Policy

Thank you for trusting and using TF Fiscal (hereinafter "the Platform" or "we"). We are jointly operated by Tongfu International Network Technology (Shenzhen) Co., Ltd. and TF Software Ltda, and are dedicated to providing e-invoicing and tax-compliance API services for businesses expanding internationally. We understand how important personal information and business data are to you, and this policy explains how we handle that information.

1. Information We Collect

1.1 Information You Provide

• Contact information: company name, contact person's name, email, mobile phone, WeCom (Enterprise WeChat) account
• Business information: company entity, CNPJ / business license, description of your use case, estimated monthly invoice volume
• Account information: login username and your encrypted password
• Payment information: contracting entity, payment method (does not include full bank card numbers or passwords)

1.2 Information Generated While You Use the Service

• Invoice business data: information on both buyer and seller, item details, tax rates, amounts and other fields required for invoicing
• API call logs: request time, IP, endpoint path, status code, response time
• Device and browser information: browser type, operating system, language preference
• Cookies and local storage: used to keep you logged in and remember your preferences

1.3 What We Do Not Collect

• Your bank account password, full credit card information, or payment password
• Sensitive personal information unrelated to the Platform's business
• Information about minors (the Platform serves business customers only)

2. How We Use Information

• To provide and maintain the TF Fiscal service, including invoice issuance, API calls, Webhook callbacks, data archiving and more
• To respond to your inquiries, tickets and technical support requests
• To fulfill contractual obligations, billing and invoicing
• To comply with Brazil's General Data Protection Law (LGPD), China's Personal Information Protection Law, and tax regulations
• To improve the product experience and service quality (based on aggregated statistics, not targeting individuals)
• To identify and guard against fraud, abuse and security risks

3. Data Storage and Cross-Border Transfer

Due to the nature of the business, TF Fiscal's core invoice data is stored with a compliant cloud provider within Brazil (Tencent Cloud São Paulo Region), in line with Brazil's LGPD requirements. To improve access for customers in China, some non-sensitive metadata may be replicated within China. We have adopted the following measures to safeguard cross-border transfers:

• All cross-border transfers use TLS 1.2+ encryption
• Sensitive fields undergo field-level encryption before transfer
• Compliance with China's Measures for Security Assessment of Outbound Data Transfers and with the cross-border transfer requirements of Brazil's LGPD

4. Data Retention Periods

• Brazilian e-invoice XML, tax authority receipts and PDFs (DANFE): retained for at least 5 years as required by law
• API call logs: retained for 12 months by default; Enterprise customers may extend this
• Account information: retained for the life of the account, deleted within 30 days after closure (except where the law requires retention)
• Contracts and payment records: retained for 5–10 years in accordance with tax law

5. Information Sharing and Disclosure

We do not sell your personal information. We share it only in the following circumstances:

• Fulfilling legal obligations: invoicing data must be shared in accordance with the lawful requirements of Brazil's Receita Federal, state SEFAZ authorities, and municipal governments
• Necessary service providers: cloud services (Tencent Cloud), payment channels, certificate authorities and the like, all under strict confidentiality agreements
• Lawful requests from judicial or administrative authorities: pursuant to valid legal instruments in China or Brazil
• Other circumstances with your explicit consent

6. Your Rights

Under the LGPD and China's Personal Information Protection Law, you have the following rights:

• Access and obtain a copy of your personal information
• Correct and supplement inaccurate information
• Delete information (within the limits permitted by law)
• Restrict or object to certain processing
• The right to data portability
• Withdraw consent previously given

To exercise the above rights, please contact us using the contact details at the end of this policy. We will respond within 15 business days.

7. Protection of Minors

The Platform provides B2B services to business customers only and does not offer any products to minors. If you discover that we have inadvertently collected information about a minor, please contact us immediately to have it deleted.

8. Changes to This Policy

We may revise this policy in response to business changes and updates to laws and regulations. Significant changes will be communicated to you through on-site announcements and email, with a reasonable transition period before they take effect.

9. Contact Us

China entity: Tongfu International Network Technology (Shenzhen) Co., Ltd.
ICP filing: 粤ICP备2026006488号-2

Brazil entity: TF Software Ltda (CNPJ 40.673.067/0001-34, São Paulo)

Email: paulo.f@tfsoftware.com.br
Phone: +55 11 95889-2222